JP7718081B2 - Image forming apparatus and program - Google Patents

Description

This application relates to an image forming apparatus and a program.

Various technologies have been proposed in the past for image forming devices that allow filtering settings to restrict communication with other parties. For example, the image forming device described in Patent Document 1 below allows filtering settings based on communication port numbers. When a specific port number, such as the port number of the RAW protocol used for printing, is changed from the default number, the printer notifies the user of the port numbers that will be enabled and disabled as a result of the change in filtering settings.

JP 2010-253724 A (FIG. 8)

The image forming device described in Patent Document 1 above accepts settings to enable or disable communication connections depending on the port number used by the application running on the image forming device. However, when there are multiple terminal devices that can issue connection requests or print instructions to the image forming device, there are cases where it is desired to change the processing executed by the image forming device in response to instructions from the multiple terminal devices. For this reason, technology is needed to change the processing for terminal devices that can communicate with the image forming device.

This application discloses technology that solves the above-mentioned problems, and provides an image forming device and program that allows a server to manage processing changes for communication partner terminal devices.

The image forming apparatus disclosed in this application is an image forming apparatus comprising an image forming unit, a communication unit capable of communicating with a terminal device, and a control unit, wherein the control unit performs an acquisition process to acquire a communication destination list including at least a first terminal device from the image forming apparatus and a server that acquires and stores the status of at least one of the terminal devices, and an instruction response process to execute a process corresponding to an instruction from a first terminal device included in the communication destination list acquired by the acquisition process, and to restrict the process corresponding to an instruction from a second terminal device not included in the communication destination list.

The image forming apparatus disclosed in this application is an image forming apparatus comprising an image forming unit, a communication unit capable of communicating with a terminal device, and a control unit, wherein the control unit performs an acquisition process to acquire a communication destination list of at least one terminal device that does not include a first terminal device from a server that acquires and stores the status of the image forming apparatus and at least one terminal device, and an instruction response process to execute a process corresponding to an instruction from a first terminal device not included in the communication destination list acquired by the acquisition process, and to restrict the process corresponding to an instruction from a second terminal device included in the communication destination list.

Furthermore, the contents disclosed in this specification are not limited to implementation as an image forming apparatus, and may also be usefully implemented, for example, as a program readable by a computer of a terminal device capable of communicating with an image forming apparatus.

With the image forming device and program configured as described above, the server can manage processing changes for the communication partner terminal device.

1 is a schematic configuration diagram of a printing system according to a first embodiment. FIG. 2 is a block diagram of the printing system shown in FIG. 1 . FIG. 10 is a diagram showing data stored in a communication destination list. FIG. 10 is a diagram illustrating data stored in a communication destination list according to another example. FIG. 10 is a diagram showing data stored in a terminal DB. FIG. 4 is a diagram illustrating data stored in a printer DB. 10 is a sequence diagram showing the processing of a server, a terminal device, and a printer in a communication destination list processing. FIG. 10 is a sequence diagram showing the processing of a server, a terminal device, and a printer in a communication destination list processing. FIG. FIG. 11 is a sequence diagram illustrating processing by a server, a terminal device, and a printer in a communication destination list process according to the second embodiment. FIG. 11 is a sequence diagram illustrating processing by a server, a terminal device, and a printer in a communication destination list process according to the third embodiment. FIG. 13 is a sequence diagram illustrating processing by a server, a terminal device, and a printer in a communication destination list process according to the fourth embodiment. FIG. 13 is a sequence diagram illustrating processing by a server, a terminal device, and a printer in a communication destination list process according to the fifth embodiment.

(First embodiment)
A printing system 10 according to a first embodiment, which is an embodiment embodying an image forming apparatus and a program according to the present application, will be described below with reference to the drawings. FIG. 1 is a schematic diagram of the printing system 10, and FIG. 2 is a block diagram of the printing system 10. As shown in FIGS. 1 and 2, the printing system 10 includes a server 11, an administration PC 13, multiple terminal devices 15, and multiple printers 17. Note that FIG. 2 illustrates only one terminal device 15 and one printer 17 to avoid cluttering the diagram. Furthermore, the printing system 10 may be configured to include one terminal device 15 and one printer 17, or may be configured to use multiple printers 17 with one terminal device 15, or may be configured to use one printer 17 with multiple terminal devices 15.

For example, a company using the printing system 10 lends a terminal device 15 and a printer 17 to a user (such as a sales employee). The user can print using the printer 17 by operating the terminal device 15. The server 11 is, for example, a management server that manages the terminal device 15. The administrator of the terminal device 15 and printer 17 (such as a company system administrator) can use the management functions of the server 11 to restrict the functions of the terminal device 15 by operating the management PC 13.

More specifically, the server 11 is, for example, an MDM (Mobile Device Management) server, which centrally manages multiple terminal devices 15 that are to be managed. The server 11 includes a server control unit 21 and a communication IF (short for interface) 22. The server control unit 21 and other components can communicate with each other via a communication bus 23. The communication IF 22 is, for example, a LAN interface, and is connected to the network 19. The network 19 includes, for example, wide area networks such as the Internet, LANs, and mobile communication networks such as 4G and 5G.

The server control unit 21 controls the server 11 overall. The server control unit 21 includes a server memory unit 24 and a server CPU 25. The server memory unit 24 is configured, for example, by combining RAM, ROM, and an HDD. The server memory unit 24 stores a server program 26, a communication destination list 27, a terminal DB (short for database) 28, and a printer DB 29. The server program 26 is a program that causes the server 11 to execute various processes. For example, the server control unit 21 controls access to the server 11 by executing the server program 26 on the server CPU 25. Furthermore, the server control unit 21 executes the server program 26 on the server CPU 25 to restrict functions on terminal devices 15 that are managed by MDM, based on instructions received from the management PC 13.

In the following description, the server control unit 21, which executes the server program 26 on the server CPU 25, may be referred to simply by its device name or program name. For example, the phrase "the server 11 receives instructions from the management PC 13 via the communication IF 22" means "the server control unit 21 executes the server program 26 on the server CPU 25, thereby controlling the communication IF 22 and receiving instructions from the management PC 13 via the communication IF 22." The same applies to the management PC 13, which executes the management program 38 (described below) on its CPU 31; the terminal device 15, which executes the OS program 49 and application program (hereinafter sometimes referred to as "application") 50 on its terminal CPU 48; and the printer 17, which executes the printer program 71 on its printer CPU 70. In addition, the term "receive" in this application is used in a way that does not necessarily require a request. In other words, the process of the server 11 receiving instructions without a request is also included in the concept of "the server 11 receiving instructions."

The communication destination list 27 is data sent from the server 11 to each printer 17. The printer 17 changes the processing for the terminal device 15 with which it is communicating based on the communication destination list 27 (printer-side communication destination list 72) obtained from the server 11. The terminal DB 28 is data for managing each terminal device 15. The printer DB 29 is data for managing the communication destination list 72 of each printer 17. Details of the communication destination list 27, terminal DB 28, and printer DB 29 will be provided later.

Next, the management PC 13 will be described. In the following description of the management PC 13, terminal device 15, and printer 17, details similar to those of the server 11 described above will be omitted as appropriate. The management PC 13 is, for example, a notebook or desktop personal computer. The management PC 13 includes a CPU 31, a memory unit 32, a user IF 33, a display 34, and a communication IF 35. The CPU 31 and other components can communicate with each other via a communication bus 37. The management PC 13 executes various processes by having the CPU 31 execute a management program 38 stored in the memory unit 32. The management PC 13 changes the display content of the display 34 in response to operational inputs made to the user IF 33 (such as a mouse or keyboard). The management PC 13 can also be connected to the network 19 via the communication IF 35.

Next, the terminal device 15 will be described. The terminal device 15 is, for example, a smartphone. Note that the terminal device of the present application is not limited to a smartphone, and may also be a tablet terminal or a notebook PC. The terminal device 15 includes a terminal control unit 41, a first communication IF 43, a second communication IF 44, and a touch panel 45. The terminal control unit 41 and other components can communicate with each other via a communication bus 46.

The terminal control unit 41 provides overall control of the terminal device 15 and includes a terminal memory unit 47 and a terminal CPU 48. The terminal memory unit 47 is configured, for example, by combining RAM, ROM, etc. The terminal memory unit 47 stores an OS program 49 and applications 50. The OS program 49 is a program that provides overall control of the terminal device 15 and provides basic functions and services to the applications 50. The OS program 49 is, for example, Android (registered trademark) OS or iOS (registered trademark). Furthermore, if the terminal device 15 is, for example, a notebook PC, the OS program 49 is, for example, Windows (registered trademark) OS.

The application 50 is, for example, a program provided by the vendor of the printer 17, and is a program that uses the functions of the OS program 49 to send print instructions to the printer 17, obtain setting information for the printer 17, send setting instructions to the printer 17, etc. The terminal control unit 41 executes the OS program 49 and application 50 on the terminal CPU 48 and controls the operation of the terminal device 15.

Therefore, the server program 26 of the server 11 and the management program 38 of the management PC 13 include a program compatible with MDM that can control terminal devices 15 running on an Android (registered trademark) OS or the like. For example, an administrator can operate the management PC 13 and use the MDM functions of the server 11 to execute various controls on the terminal devices 15. The various controls referred to here include, for example, restricting functions such as communication functions on each managed terminal device 15, deleting data on the terminal device 15, initializing, locking the screen, and locking the device due to loss. Note that the server 11 may be a server that is capable of at least one of the above-mentioned restricting controls such as restricting functions, deleting data, initializing, locking the screen, and locking the device due to loss.

In addition to the MDM function, the server 11 also has a MAM (Mobile Application Management) function. For example, the server 11 can control the installation of applications 50 on the terminal device 15 and the setting of parameters during installation based on instructions from the management PC 13. Note that the server 11 does not necessarily have to have the MAM function.

The first communication IF 43 is a communication interface capable of performing short-range wireless communication conforming to the Bluetooth (registered trademark) standard, for example. The terminal device 15 can communicate with the first communication IF 61 of the printer 17 via the first communication IF 43 and can send print instructions, etc. to the printer 17. The second communication IF 44 is a communication interface capable of communication with mobile communication system networks such as 4G and 5G, and wireless communication such as Wi-Fi (registered trademark). The terminal device 15 is connected to the network 19 via the second communication IF 44. The terminal device 15 can also communicate with the printer 17 via the second communication IF 44 and can send print instructions, etc. to the printer 17. The terminal device 15 may also be connected to the network 19 via a wired connection. The above-mentioned communication method is an example and can be changed as appropriate. For example, the communication standard of the first communication IF 43 is not limited to the Bluetooth (registered trademark) standard, and may be other short-range wireless communication standards such as NFC. Furthermore, the second communication IF 44 may be configured to be able to communicate with the second communication IF 62 of the printer 17 using, for example, the WFD (short for Wi-Fi Direct (registered trademark)) standard established by the Wi-Fi Alliance.

The terminal device 15 also accepts user input via the touch panel 45. The terminal device 15 also displays various information on the touch panel 45. The user IF provided in the terminal device 15 is not limited to the touch panel 45, and may include button switches or slide switches in addition to or instead of the touch panel 45. The terminal device 15 may also be provided with a display device such as an LCD and an input device such as a keyboard separately.

Next, we will explain the printer 17. The printer 17 is, for example, a portable printing device that can be carried around and prints image data of a print job obtained from the terminal device 15 via wired or wireless communication onto a sheet (such as thermal paper). The printer 17 includes a first communication IF 61, a second communication IF 62, a power supply unit 63, a printing unit 64, a user IF 65, and a printer control unit 67. The first communication IF 61 and others can communicate with each other via a communication bus 68.

The first communication IF 61 is a communication interface capable of short-range wireless communication conforming to the Bluetooth (registered trademark) standard, for example, and communicates with the first communication IF 43 of the terminal device 15. The second communication IF 62 is a communication interface capable of communication over a wireless LAN such as Wi-Fi (registered trademark) or a wired LAN. The printer 17 can connect to the network 19, for example, by connecting to an access point within the company or at a business trip destination via the second communication IF 62.

The power supply unit 63 includes, for example, a power supply circuit and a battery that generate power from a commercial power source to supply to each device within the printer 17. Therefore, the printer 17 is a mobile printer that can perform printing operations, etc., using the battery as a power source even when not connected to a commercial power source. The power supply unit 63 may also be configured to include only one of a power supply circuit or a battery that can use a commercial power source. The image forming device of the present application may also be, for example, a label printer, receipt printer, or other portable image forming device, or a battery-powered fax machine or scanner device. The image forming device may also be a stationary printer or a multifunction device equipped with printing, faxing, scanning, and copying functions.

The printing unit 64 is equipped with, for example, a thermal head and prints images on sheets using a direct thermal method. The printing unit 64 may also be configured to print using an electrophotographic method or an inkjet method. The user IF 65 is, for example, a touch panel, push button switches, etc., and accepts operation inputs from the user and displays various information. The printer 17 may also be configured without a touch panel and only equipped with switches such as push button switches or slide switches.

The printer control unit 67 provides overall control of the printer 17. The printer control unit 67 includes a printer memory unit 69 and a printer CPU 70. The printer memory unit 69 is configured by combining RAM, ROM, etc. The printer memory unit 69 is capable of storing a printer program 71, a communication destination list 72, template data 74, and personal information 75. The printer program 71 is, for example, firmware that provides overall control of each unit of the printer 17. The printer control unit 67 executes the printer program 71 using the printer CPU 70, controlling the printing unit 64, etc. The communication destination list 72 is information from the communication destination list 27 obtained from the server 11.

Template data 74 is, for example, template data used when printing standard documents such as receipts and reports, or data typically used for documents such as company logos. Personal information 75 is, for example, data to be inserted into a template, such as the name and affiliation of the printer 17 user, the customer name, and the customer address. The printer 17 prints using, for example, a template or personal information specified in the print job. Alternatively, the printer 17 prints using a preset template or personal information based on a specified operation on the user IF 65. Note that the confirmation information 76 indicated by a dashed line in Figure 2 will be described in the second embodiment below. The printer 17 of the first embodiment may be provided with this confirmation information 76 and may execute control using the confirmation information 76, or may not be configured with the confirmation information 76.

(Regarding the communication destination lists 27 and 72, the terminal DB 28, and the printer DB 29)
The printer 17 of this embodiment can receive print instructions and the like from the terminal device 15 via the first communication IF 43 and the second communication IF 44. Therefore, without any restrictions, the printer 17 may receive and execute print instructions and the like not only from authorized users' terminal devices 15 but also from unspecified terminal devices 15. For example, a previous user at the company may connect a terminal device 15 to the printer 17 using the printer 17's past history and execute a print job. Furthermore, portable image forming devices such as mobile printers may be connected by third parties other than the owner while on a business trip or at a sales location. If the printer 17 is used fraudulently, consumables such as sheets may be consumed by third parties, parts such as the thermal head may deteriorate with use, or personal information 75 may be leaked through printing or other means. Therefore, the printing system 10 of this embodiment uses the communication destination lists 27 and 72 to limit the terminal devices 15 that can connect to the printer 17 and limit the terminal devices 15 that can issue print instructions and the like. As described above, the communication destination list 72 is data obtained by storing the communication destination list 27 on the server 11 side in the printer 17. Therefore, the following explanation will mainly focus on the communication destination list 72, and will omit explanation of the communication destination list 27 as appropriate.

Figure 3 shows an example of data stored in the destination list 72. As shown in Figure 3, the destination list 72 stores multiple MAC addresses. The multiple MAC addresses are the MAC addresses of the LAN interface (e.g., a communication interface for Wi-Fi (registration)) of the second communication IF 44 of the terminal device 15. The printer 17 allows connection to its own second communication IF 62 for second communication IF 44s whose MAC address information is set in the destination list 72 (hereinafter sometimes referred to as "listed in the destination list 72"), i.e., terminal devices 15 with listed MAC addresses. On the other hand, the printer 17 denies connection to its own device for terminal devices 15 with MAC addresses not listed in the destination list 72. Therefore, the destination list 72 in this embodiment is what is known as a whitelist.

As shown in FIG. 3, the communication destination list 72 stores information about processing details associated with each of multiple MAC addresses. In the example shown in FIG. 3, two processing details, "printing" and "settings change," are stored. These processing details indicate whether or not processing based on instructions is permitted when a terminal device 15 with each MAC address connects to the printer 17 and the terminal device 15 issues a printing instruction or a settings change instruction to the printer 17 after the connection. In the figure, an "O" indicates permission, and an "X" indicates denial. For example, when the printer 17 receives a connection from the terminal device 15 with the top MAC address "01:01:XX:XX:XX:XX," it accepts both a printing instruction and an instruction to change settings for the printer itself as post-connection instructions and executes the processing according to the instructions. On the other hand, when the printer 17 receives a connection from the terminal device 15 with the second-highest MAC address, "23:01:XX:XX:XX:XX," it will not accept a print instruction as a post-connection instruction, but will only accept a setting change instruction. In this way, the printer 17 can change the processing content that it allows for each terminal device 15.

Note that the contents of the communication destination list 72 shown in Figure 3 are just an example. For example, the processing contents are not limited to the two processing contents described above, and may include print preview processing, printing processing using template data 74, etc. Furthermore, if the printer 17 has functions other than printing, functions such as scanning and faxing may also be adopted as processing contents of the communication destination list 72.

Furthermore, while the communication destination list 72 shown in FIG. 3 illustrates the MAC address (LAN interface) of the second communication IF 44, it can be set in a similar manner for other communication methods. For example, when communication conforming to the Bluetooth® standard is performed using the first communication IF 43 of each terminal device 15, the communication destination list 72 may be configured to set a physical address (public address) specific to the Bluetooth® communication interface. In this case, similar to the MAC address, the communication destination list 72 may also list the public address for which connection is permitted. Alternatively, when NFC communication is used as short-range wireless communication, the NFCID may be used as information for identifying the terminal device 15 and listed in the communication destination list 72.

In the example shown in Figure 3, the MAC addresses from which connections are permitted are associated with processing content and set in the communication destination list 72, but as shown in Figure 4, only the MAC addresses from which connections are permitted may be set. In this case, the printer 17 may only permit connections from terminal devices 15 listed in the communication destination list 72, and uniformly permit printing and setting change processing after connection. In this case, when a connection is received, the printer 17 may check only the MAC address of the connecting terminal device 15 in the communication destination list 72, and if the MAC address is listed in the communication destination list 72, it may execute all instructions from the connected terminal device 15 in subsequent processing.

Alternatively, the MAC address does not need to be listed in the communication destination list 72. The printer 17 may permit connection to a terminal device 15 that has received a connection instruction, but may determine whether to execute printing or setting change processing after connection based on the communication destination list 72. Therefore, the "instruction from the first terminal device" in this application is not limited to a connection instruction, but may also be other instructions such as a printing instruction or a setting change instruction.

In the examples shown in Figures 3 and 4, a so-called whitelist is used as the communication destination list 72, which allows connections for MAC addresses listed in the communication destination list 72. However, this is not limited to this. A so-called blacklist, which does not allow connections for MAC addresses listed in the communication destination list 72, may also be used as the communication destination list 72. In this case, for example, if the list of MAC addresses in Figure 4 is used as the blacklist, the printer 17 will not allow connections from terminal devices 15 listed in the communication destination list 72. On the other hand, the printer 17 will allow connections from terminal devices 15 not listed in the communication destination list 72. Even in the case of such a blacklist, the processing content that the terminal device 15 is allowed to perform after connection may be set in the communication destination list 72. Furthermore, the printer 17 may be configured to be able to switch between a mode that uses a whitelist and a mode that uses a blacklist.

Figure 5 also shows an example of data stored in the terminal DB 28. The terminal DB 28 stores data for managing terminal devices 15. As shown in Figure 5, the terminal DB 28 stores information such as a terminal ID, user account, password, physical address, and installed applications in association with each other. The terminal ID is, for example, a serial number assigned to the terminal device 15 by the vendor of the terminal device 15, and is unique information that enables the terminal device 15 to be distinguished from other terminal devices 15. The user account is the account name of a user authorized to use the terminal device 15. The password is the password for that user account. The physical address is the communication interface of the terminal device 15, more specifically, for example, the MAC address of the first communication IF 43 and the public address of the second communication IF 44. The installed applications are information indicating the types of applications (including application 50) installed in the terminal device 15. As described above, applications to be installed on the terminal device 15 are installed or uninstalled by the server 11 using the MDM function. When the server 11 receives and executes an instruction for the terminal device 15 from the management PC 13, it updates the information in the terminal DB 28. Note that the example shown in FIG. 5 is just one example. The server 11 may also use the MDM function to store information in the terminal DB 28 indicating whether data on the terminal device 15 has been initialized or whether the screen has been locked.

Figure 6 shows an example of data stored in the printer DB 29. The printer DB 29 stores information related to the printer 17's destination lists 27 and 72. In this embodiment, the server 11 not only manages the status of the terminal device 15 using the terminal DB 28, but also manages the status of the printer 17. As shown in Figure 6, the printer DB 29 stores the printer ID, confirmation date and time, and destination list in association with each other. The printer ID is, for example, a serial number assigned to the printer 17 by the printer 17's vendor, and is unique information that enables the printer 17 to be distinguished from other printers 17. The confirmation date and time is information on the date and time when the authenticity of the destination list 27 was confirmed by the authenticity process (S29 in Figure 7) described below. The destination list is information on the list name of the destination list 27 sent to the printer 17, i.e., the destination list 72 held by the printer 17.

The server 11 may have multiple types of destination lists 27 and use different destination lists 27 for each printer 17, or all printers 17 may use the same destination list 27. For example, a large company may prepare different destination lists 27 for each department, while a small company may use the same destination list 27 for all printers 17 and update the destination lists 27 all at once to implement connection restrictions and processing restrictions (sometimes called connection restrictions, etc.).

(Communication destination list processing)
Next, the communication destination list processing executed by the printing system 10 will be described using FIGS. 7 and 8. FIGS. 7 and 8 show the processing of the server 11, terminal device 15, and printer 17 in the communication destination list processing. By executing the communication destination list processing, the printing system 10 restricts the terminal devices 15 that can connect to the printer 17 based on the communication destination lists 27 and 72, and restricts the processing content (printing, setting changes) that the terminal devices 15 can instruct the printer 17 to perform after connection. The sequence diagrams in this specification basically show the processing of the CPUs (server CPU 25, CPU 31, terminal CPU 48, and printer CPU 70) in accordance with the instructions written in each program. In other words, processes such as "request,""send," and "determination" in the following description represent CPU processing. CPU processing also includes hardware control via a program. Furthermore, "data" in this specification is represented by a computer-readable bit string. Data with essentially the same meaning but different formats is considered to be the same data. The same applies to "information" in this specification.

In the following explanation, as an example, the MAC address of a Wi-Fi (registered trademark) wireless communication interface is set in the communication destination list 27, and connection and processing content restrictions are implemented based on the MAC address. Note that connection restrictions, etc., can also be implemented similarly when other physical addresses, such as Bluetooth (registered trademark) public addresses, are used. The following also describes the case where three terminal devices 15 connect to a printer 17. To distinguish between the terminal devices 15, they are referred to as terminal devices 15A, 15B, and 15C. When terminal devices 15 are not distinguished and are referred to collectively, they are referred to as terminal device 15. Terminal device 15A is, for example, a terminal device 15A of a system administrator, and is a terminal device 15A whose MAC address information is not set in the communication destination list 72. Terminal device 15B is, for example, a terminal device 15B of an employee who is not authorized to use the printer 17 or a terminal device 15B of an external third party, and is a terminal device 15B that is not listed in the communication destination list 72. Terminal device 15C is the terminal device 15C of the user of printer 17, and is the terminal device 15C listed in the communication destination list 72. Also, in the initial state of printer 17, the communication destination list 72 is not stored in the printer control unit 67. Also, the following explanation will mainly focus on the case where communication destination list 72 is a whitelist, but the same can be implemented when the communication destination list 72 is a blacklist.

First, as shown in step (hereinafter simply referred to as "S") 11 of Figure 7, terminal device 15A transmits an instruction to server 11 via network 19 to request communication destination list 27 (hereinafter simply referred to as "request"). For example, when application 50 is launched, terminal device 15 executes S11 to request communication destination list 27. Alternatively, after launching application 50, terminal device 15 may request communication destination list 27 based on operational input to touch panel 45. Terminal device 15A executes application 50 on terminal CPU 48 to execute S11 and subsequent processes.

When the server 11 receives the request of S11, it sends the communication destination list 27 to the terminal device 15A (S13). For example, if all employees use the same communication destination list 27, only one communication destination list 27 is stored in the server storage unit 24, and the server 11 sends that communication destination list 27 to the terminal device 15 (S13). Alternatively, the server 11 may obtain the terminal ID of the terminal device 15A and the printer ID of the printer 17 from the terminal device 15A, identify the communication destination list 27 corresponding to the terminal ID or printer ID, and send it to the terminal device 15A.

When the terminal device 15A acquires the communication destination list 27 in S13, it sends a connection request to the printer 17 via Wi-Fi (registered trademark) communication over the network 19 (S15). The method for specifying the printer 17 to which the communication destination list 27 is to be sent is not particularly limited. For example, the terminal device 15 may send the communication destination list 27 to the printer 17 set in the print settings of the application 50, i.e., the selected printer 17 or the default printer 17. Alternatively, the terminal device 15 may search for printers 17 within the same LAN, display a list, and accept from the user the selection of the printer 17 to which the communication destination list 27 is to be sent from the list.

When printer 17 receives the connection request, it determines whether it has a communication destination list 72 (S17). Because printer 17 does not have a communication destination list 72, it sends a response to terminal device 15A permitting the connection (S19). Note that if printer 17 already has a communication destination list 72, it determines whether to permit connection from terminal device 15A based on that communication destination list 72. The process of determining whether to permit connection using this communication destination list 72 will be described later.

The printer 17 also requests the communication destination list 27 from the terminal device 15A (S21). Therefore, in this embodiment, if the printer 17 does not have a communication destination list 72, it does not determine whether or not to allow a connection. In other words, regardless of whether the terminal device 15 that sent the connection request is listed in the communication destination list 27 of the server 11, it grants the connection (S19) and requests the communication destination list 27 from that terminal device 15 (in this case, terminal device 15A) (S21). This allows connection for all terminal devices 15 that can communicate with the printer 17 (that can send connection requests), and the communication destination list 27 can be obtained from the server 11 via that terminal device 15. For example, if the printer 17 is not connected to the Internet (server 11), it can obtain the communication destination list 27 via the terminal device 15.

Note that the conditions for permitting connection from a terminal device 15 without determining whether a connection is possible and for acquiring the communication destination list 27 from the terminal device 15 are not limited to the above-described condition of not storing the communication destination list 27. For example, the printer 17 may transition to a state in which it permits connection without determining whether a connection is possible and acquire the communication destination list 27 via the terminal device 15 when at least one of the following conditions is met: the printer 17 is powered on; a predetermined time has passed since acquiring the communication destination list 27; or an instruction to acquire the communication destination list 27 is received from the user. For example, the printer 17 may discard its own communication destination list 72 each time it is powered off. Then, when the printer 17 is powered on, it may transition to a state in which it permits connection, permits connection from all communicable terminal devices 15, and acquires the communication destination list 27. For example, in an environment in which the printer 17 connects to the server 11 via the terminal device 15 each time it is powered on, it can always use the latest communication destination list 27 by discarding the communication destination list 72 each time it is powered off.

Alternatively, the printer 17 may discard/invalidate the communication destination list 72 when a first time has elapsed since the printer 17 acquired the communication destination list 27 and reflected it in the device settings. Then, when a second time has elapsed since the printer 17 acquired the communication destination list 27, the printer 17 may enter a state in which it allows a connection without determining whether or not a connection is possible, and may allow a connection from a communicable terminal device 15 and acquire the communication destination list 27. This second time is preferably shorter than the first time. This makes it possible to set the validity period of the communication destination list 72 to the first time, and update the communication destination list 72 based on the passage of the second time before the first time has elapsed. Furthermore, the printer 17 may allow a connection from a terminal device 15 and acquire the communication destination list 27 even if the data in the communication destination list 27 has been erased from the printer storage unit 69 for some reason.

Alternatively, the printer 17 may receive an instruction to acquire a new communication destination list 27 based on an operation input to the user IF 65. Upon receiving the instruction, the printer 17 discards the communication destination list 72. This causes the printer 17 to enter a state in which it does not retain the communication destination list 72 and accepts connections from terminal devices 15 without determining whether a connection is possible. Furthermore, upon receiving the instruction, the printer 17 may transition to a state in which it accepts connections from terminal devices 15, regardless of whether it retains a communication destination list 72 or the contents of the retained communication destination list 72. The printer 17 may also transition to a state in which it accepts connections based on a specific operation, such as pressing the power button for three seconds or more. Furthermore, the printer 17 may transition to a state in which it accepts connections on the condition that settings are changed by accessing an internal server of the printer 17, such as an EWS (Embedded Web Server). This allows the communication destination list 27 to be updated based on user operations.

When terminal device 15A receives the request of S21, it transmits the communication destination list 27 obtained from server 11 in S13 to printer 17 (S23). When printer 17 receives the communication destination list 27 from terminal device 15A, it transmits an authenticity request to server 11 via terminal device 15A to inquire of server 11 about the authenticity of the received communication destination list 27 (S25, S27). By executing S25, printer 17 inquires of server 11 about whether the communication destination list 27 received via terminal device 15A is the communication destination list 27 transmitted from server 11 to terminal device 15A, i.e., whether it is a legitimate communication destination list 27.

In S25 and S27, the printer 17 sends the communication destination list 27 acquired in S23 and its own printer ID, along with an authenticity request, to the server 11. When the server 11 acquires the authenticity request from the terminal device 15 in S27, it determines the authenticity of the communication destination list 27 (S29). The server 11 transmits the authenticity determination result to the printer 17 via the terminal device 15A (S31, S33). The printer 17 confirms the determination result acquired from the server 11 (S35).

For example, in S29, the server 11 determines whether the destination list 27 acquired from the printer 17 is included in the destination lists 27 stored in the server storage unit 24 of the server 11. If included, the server 11 transmits to the printer 17 a determination result indicating that the destination list 27 is a legitimate destination list 27, i.e., the destination list 27 transmitted from the server 11 to the terminal device 15A (S31, S33). In this case, the printer 17 determines in S35 that the destination list 27 is legitimate and reflects the destination list 27 acquired from the terminal device 15A as a destination list 72 in its settings (S37). In subsequent communications with the terminal device 15, the printer 17 implements connection restrictions, etc., using the destination list 72 reflected in the settings. The server 11 also associates the printer ID acquired in S27, the confirmation date and time when the authenticity was confirmed in S29, and the list name of the destination list 27 whose authenticity was confirmed in the printer DB 29, and stores these in association with each other (see FIG. 6). This allows the server 11 to manage the communication destination list 72 of the printer 17 based on the printer DB 29.

Furthermore, in S29, if the server 11 does not include the destination list 27 acquired from the printer 17 in its own device's destination list 27, it transmits to the printer 17 a determination result that the destination list 27 is not a legitimate destination list 27, i.e., that the destination list 27 has not been sent from the server 11 to the terminal device 15A (S31, S33). In this case, the printer 17 determines in S35 that the destination list 27 is not a legitimate destination list 27, discards the destination list 27 acquired from the terminal device 15A, and does not reflect it in its settings. The printer 17 maintains a state in which it does not hold a destination list 72, and again permits connection from the terminal device 15A, etc., and enters a state in which it can acquire a destination list 27. This prevents an unauthorized destination list 27 not sent by the server 11 from being reflected in the printer 17's settings. This prevents authorized users from being unable to use the printer 17. It also prevents unauthorized users from using the printer 17.

Note that the method for verifying the authenticity of the communication destination list 27 is not limited to the method of verifying whether the communication destination list 27 is the one held by the server 11 described above. For example, the server 11 may record the terminal ID of the terminal device 15A that sent the communication destination list 27 in S13 and information about the sent communication destination list 27 as history information. Then, in S29, the server 11 may determine that the communication destination list 27 is legitimate if the terminal ID of the terminal device 15A that received the authenticity request in S27 and the communication destination list 27 remain in the history information.

In S37, the printer 17 reflects the destination list 27 in the device settings as the destination list 72, and then determines whether the currently connected terminal device 15A is a device that may be permitted to connect based on the reflected destination list 72 (S39). As described above, the terminal device 15A is not listed in the destination list 72. For example, the terminal device 15A is the terminal of the system administrator who sets the destination list 72 for the printer 17, and is not the terminal of a user who uses the printer 17 for printing, etc., and therefore is not listed in the destination list 72. Therefore, the printer 17 disconnects Wi-Fi (registered trademark) communication with the terminal device 15A (S41). Therefore, after acquiring the destination list 27, if the printer 17 has connected communication with the terminal device 15A (an example of the second terminal device of the present application) that is not listed in the destination list 27, the printer 17 disconnects the communication (S41). Furthermore, if a terminal device 15 other than terminal device 15A, which was used as a relay to obtain the communication destination list 27 from the server 11, is connected to the printer 17, the printer 17 may terminate communication if that terminal device 15 is not listed in the communication destination list 72 after setting the communication destination list 72. Furthermore, if the printer 17 updates the communication destination list 72, the printer 17 may terminate communication with a terminal device 15 that was listed in the old communication destination list 72 but is not listed in the new communication destination list 72. This can also be done if the communication destination list 72 is a blacklist. In this case, for example, terminal device 15A becomes a terminal device 15 listed in the communication destination list 72 (that is, one that is not permitted to connect). Because the currently connected terminal device 15A is listed in the communication destination list 72 (S39), the printer 17 terminates communication with terminal device 15A (S41).

Furthermore, in communication between the terminal device 15 and the printer 17 via the network 19 (router, etc.), the method by which the printer 17 obtains the MAC address of the terminal device 15 with which it is communicating is not particularly limited. For example, if the printer 17 can detect the MAC address of the terminal device 15 from communication data sent and received between the printer 17 and the terminal device 15, it may use that MAC address in the determination process of S39. Furthermore, the printer 17 may send an ARP (Address Resolution Protocol) request to identify the MAC address from the IP address of the terminal device 15. Alternatively, the printer 17 may inquire of the application 50 of the terminal device 15 about the MAC address of the terminal device 15.

Next, using Figure 8, we will explain the processing after reflecting the communication destination list 72. For example, after printer 17 disconnects communication with terminal device 15A in S41 of Figure 7, it receives a connection request from terminal device 15B via network 19 (S43). Upon receiving the connection request, printer 17 determines whether the MAC address of terminal device 15B is listed in communication destination list 72, and determines whether terminal device 15B is a device that may be permitted to connect (S45). Because terminal device 15B is not listed in communication destination list 72, printer 17 notifies terminal device 15B that the connection is not permitted, and denies the connection (S47).

For example, in TCP/IP protocol communication with terminal device 15B, if printer 17 receives a connection establishment request packet (SYN packet) from terminal device 15B (S43), it responds with a packet (RST packet) refusing to establish the connection (S47). Alternatively, printer 17 may discard the connection request of S43 and notify application 50 of terminal device 15B of a communication error or the like (S47). Printer 17 may also discard the connection request of S43 without notifying terminal device 15B of S47. Similarly, in Bluetooth® standard communication, connection can be refused based on communication destination list 72. For example, if printer 17 receives a pairing request via Bluetooth® standard communication (S43), it may refuse the pairing request (S47). Additionally, regardless of the connection request, the printer 17 will reject any print or setting change instructions from terminal device 15B that is not listed in the communication destination list 72. Note that the same process can be carried out if the communication destination list 72 is a blacklist. In this case, for example, terminal device 15B becomes a terminal device 15 listed in the communication destination list 72. Because terminal device 15B, which received the connection request in S43, is listed in the communication destination list 72 (S45), the printer 17 rejects the connection with terminal device 15B (S47).

On the other hand, when the printer 17 receives a connection request from terminal device 15C listed in the communication destination list 72 (S49), it determines that the device is acceptable for connection based on the communication destination list 72 (S51) and permits the connection (S53). Note that the same process can be carried out even when the communication destination list 72 is a blacklist. In this case, for example, terminal device 15C is a terminal device 15 that is not listed in the communication destination list 72. Since terminal device 15C, which received the connection request in S49, is not listed in the communication destination list 72 (S51), the printer 17 permits the connection (S53).

After establishing a connection in S53, when the printer 17 receives a print instruction from the terminal device 15C (S55), it determines whether the terminal device 15C is a device that can execute printing based on the communication destination list 72 (S57). The printer 17 checks the processing content associated with the MAC address of the terminal device 15C in the communication destination list 72 (see Figure 3). If printing from the terminal device 15C is permitted ("O" in Figure 3), the printer 17 executes printing based on the print instruction (S59). When printing is complete, the printer 17 sends a completion notification to the terminal device 15C (S61). This allows the printer 17 to execute only print instructions from terminal devices 15 that are permitted to print in the communication destination list 72. Note that if the terminal device 15C is not permitted to print in the communication destination list 72, the printer 17 may, for example, not execute printing and notify the application 50 of the terminal device 15C of a print error. Alternatively, the printer 17 may not respond to the terminal device 15 and instead display an error on its own user IF 65. Furthermore, when using a communication destination list 72 in which only MAC addresses are set, as shown in FIG. 4, if the printer 17 establishes a connection in S53 and then receives a print instruction (S55), it will execute printing (S59) without executing the determination process (determining the processing content) in S57.

The same process can also be carried out when the communication destination list 72 is a blacklist. In this case, for example, the process permitted for terminal devices 15 that have been permitted to connect may be set in the blacklist communication destination list 72 separately from the MAC addresses of devices that are denied connection (blacklist). The printer 17 may then determine whether to permit printing for terminal devices 15C and other devices that have been permitted to connect, based on the process information set separately from the blacklist. Alternatively, when using a blacklist communication destination list 72 that sets only MAC addresses, as shown in Figure 5, the printer 17 may connect to a terminal device 15C that is not listed in the communication destination list 72, and then, after receiving a print instruction (S55), execute printing (S59) without performing the determination process of S57.

The printer 17 can also process setting change instructions in the same way as print instructions. When the printer 17 receives a setting change instruction from the terminal device 15C (S63), it determines whether the device is authorized to perform the setting change based on the communication destination list 72 (S65). If the terminal device 15C is authorized to perform the setting change, the printer 17 executes the setting change based on the instruction (S67). For example, the printer 17 may accept time setting changes, changes to the contents of the template data 74 or personal information 75, or changes to the IP address. Once the setting change is complete, the printer 17 sends a completion notification to the terminal device 15C (S69). This allows setting changes to be permitted only for terminal devices 15 authorized in the communication destination list 72. Note that if the terminal device 15C is not authorized to perform setting changes in the communication destination list 72, the printer 17, for example, does not execute the setting change and notifies the terminal device 15C of an error. Note that, as with the print instructions described above, if the communication destination list 72 is a blacklist, control based on the blacklist can be executed for setting change instructions.

Incidentally, the printer 17 is an example of an image forming device. The first communication IF 61 and the second communication IF 62 are examples of a communication unit. The printing unit 64 is an example of an image forming unit. The printer control unit 67 is an example of a control unit. The terminal device 15C is an example of a first terminal device. The terminal device 15A is an example of a relay terminal device. The terminal device 15B is an example of a second terminal device. The application 50 is an example of a program. S13 and S23 are examples of acquisition processing and transmission processing. S47, S53, 57, S59, 65, and S67 are examples of instruction response processing. S41 is an example of disconnection processing. S25 is an example of inquiry processing.

(Effects) According to the first embodiment described above, the following effects are achieved.
(1) In this embodiment, the printer 17 acquires a communication destination list 72 (communication destination list 27) from the server 11, which acquires and stores the status of the printer 17 and at least one terminal device 15 (S13, S23). If the communication destination list 72 acquired in S23 is a so-called whitelist, the printer 17 executes processing corresponding to instructions from the terminal device 15C included in the communication destination list 72 (the connection request in S49, the print instruction in S53, and the setting change instruction in S63) (S53, S59, S67). On the other hand, the printer 17 does not execute processing corresponding to instructions (such as a connection request) from the terminal device 15B not included in the communication destination list 72 (S47).

This allows the process executed by the printer 17 to be changed based on the destination list 72 obtained from the server 11 when an instruction is received from one of multiple terminal devices 15. For example, if there are multiple users who may use the printer 17, or if the printer 17 is used outside the home, the printer 17 may receive connection requests or print instructions from unspecified users. In such cases where there are multiple terminal devices 15 that may issue connection requests or print instructions to the printer 17, the process executed by the printer 17 in response to instructions from multiple terminal devices 15A, 15B, and 15C can be changed based on the destination list 72 obtained from the server 11. Therefore, the process of the printer 17 can be managed by the server 11. A system administrator, for example, can centrally manage the destination lists 27 (operations) of multiple printers 17 by setting or changing the destination list 27 of the server 11.

(2) In S13 and S23, the printer 17 acquires the communication destination list 72 from the server 11 via the terminal device 15A. If the acquired communication destination list 72 is a whitelist and the terminal device 15A is not included in the communication destination list 72, the printer 17 disconnects communication with the terminal device 15A after acquiring the communication destination list 72 (S41). As a result, even if the terminal device 15A that connected to acquire the communication destination list 72 is not listed in the communication destination list 72, communication is disconnected even if the terminal device 15A is currently connected. As a result, after acquiring the communication destination list 72, only the terminal devices 15 listed in the communication destination list 72 can be connected to the printer 17.

(3) Furthermore, even when the communication destination list 72 is a so-called blacklist, connection restrictions can be implemented in the same way as with the whitelist described above. For example, in response to an instruction from terminal device 15C that is not included in the obtained communication destination list 72, printer 17 executes the process corresponding to the instruction (S53, S59, S67). On the other hand, in response to an instruction from terminal device 15B that is included in the communication destination list 72, printer 17 does not execute the process corresponding to the instruction (S47). In this way, the process executed by printer 17 in response to instructions from multiple terminal devices 15A, 15B, and 15C can be changed using the communication destination list 72 obtained from server 11.

(4) Also, even if the blacklisted communication destination list 72 is acquired from the server 11 via the terminal device 15A, if the communication destination list 72 includes the terminal device 15A, the printer 17 may disconnect communication with the terminal device 15A after acquiring the communication destination list 72 (S41). This allows only terminal devices 15 not listed in the communication destination list 72 to connect to the printer 17 after acquiring the communication destination list 72.

(5) Furthermore, the printer 17 is a portable image forming device. In the case of a portable image forming device such as a mobile printer, there is a risk that it may be connected to from an unspecified terminal device 15 while on a business trip, etc. For this reason, it is extremely beneficial to employ a portable image forming device as an image forming device whose processing content to be executed based on instructions from the terminal device 15 can be changed using the communication destination list 72 obtained from the server 11.

(6) Furthermore, the communication destination list 72 includes information on at least one of the terminal device 15's MAC address and Bluetooth (registered trademark) public address. By using the MAC address or public address, which are physical addresses unique to the device, the terminal device 15 can be identified based on the communication destination list 72, and appropriate action can be taken, such as refusing connection or allowing printing.

(7) The printer 17 inquires of the server 11 as to whether the communication destination list 72 acquired via the terminal device 15A is the communication destination list 27 sent from the server 11 (S25). If the printer 17 determines as a result of the inquiry that the communication destination list 27 is the communication destination list 27 sent from the server 11, it executes processing such as S45 based on the communication destination list 72. This, for example, can prevent a communication destination list 27 that has expired on the server 11 side from being applied to the printer 17 settings. Alternatively, even if the communication destination list 27 is forged by a malicious third party, it can prevent the settings of the fraudulently created communication destination list 27 from being reflected in the printer 17. This can prevent connection and printing from terminal devices 15B and the like other than terminal devices 15 that should be permitted.

(8) In addition, in S13 and S23, the printer 17 obtains the destination list 27 from the server 11 via the terminal device 15A, and obtains the destination list 27 regardless of whether the relayed terminal device 15 is a terminal device 15C included in the destination list 27 or a terminal device 15A that is not included. This allows the printer 17 to obtain the destination list 27 from the server 11 via any terminal device 15 that is capable of communication, without being subject to the restrictions set in the destination list 27. For example, as in the above embodiment, the printer 17 can obtain the destination list 27 from all terminal devices 15 that are capable of communication, provided that the terminal device 15 does not store the destination list 72. Alternatively, if the destination list 72 has expired, for example, the printer 17 can obtain the destination list 27 from any terminal device 15 that is capable of communication, without being subject to the restrictions of the destination list 72, even if the terminal device 15 still stores the destination list 72. Furthermore, if the printer 17 holds an old communication destination list 72, it may obtain the communication destination list 27 only from terminal devices 15 permitted in that communication destination list 72.

(9) The printer 17 may transition to a state in which connection is permitted and acquire the communication destination list 27 from a communicable terminal device 15 when at least one of the following conditions is met: the printer 17 is powered on; a predetermined time has elapsed since acquiring the communication destination list 27; or an instruction to acquire the communication destination list 27 is received from the user. In this way, for example, the communication destination list 27 can be updated to the latest communication destination list 27 each time the user turns on the power. The communication destination list 27 can also be updated to the latest communication destination list 27 when a predetermined time has elapsed, such as when the expiration date of the communication destination list 27 has passed. The communication destination list 27 can also be updated to the latest communication destination list 27 in response to a user instruction if the user intentionally wishes to update it.

(10) The printer 17 executes printing using the printing unit 64 based on a print instruction (an example of an image formation instruction of the present application) obtained from the terminal device 15C listed in the communication destination list 72 (S59). On the other hand, the printer 17 does not permit connection to, or accept print instructions from, the terminal device 15B that is not listed in the communication destination list 72 (S47). This allows the communication destination list 72 to be used to manage, using the communication destination list 27 of the server 11, the terminal devices 15 that are permitted to have the printer 17 execute printing, among the terminal devices 15 with which communication is possible.

(11) When the printer 17 receives a connection request from the terminal device 15C listed in the communication destination list 72 to the second communication IF 62 (S49), it permits the connection (S53). On the other hand, when the printer 17 receives a connection request from the terminal device 15B not listed in the communication destination list 72 (S43), it does not permit the connection (S47). This allows the communication destination list 72 to be used to manage, by the communication destination list 27 of the server 11, the terminal devices 15 that are permitted to connect to the printer 17, among the terminal devices 15 that can communicate with the printer 17.

(13) After acquiring the communication destination list 72 in S23, if the printer 17 is connected to a terminal device 15A that is not included in the acquired communication destination list 72, the printer 17 disconnects the connected communication (S41). In other words, regardless of whether the terminal device 15A is a relay terminal device that was relayed to acquire the communication destination list 72, if the terminal device 15A is connected to a terminal device 15 that is not included in the acquired communication destination list 72, the connection may be disconnected. As a result, for terminal devices 15 that were connected before the communication destination list 72 was acquired, the connection is disconnected according to the contents of the acquired communication destination list 72. The settings of the communication destination list 72 can also be reflected in terminal devices 15 that were connected before the settings were made.

(14) The communication destination lists 27 and 72 associate the MAC address of the terminal device 15 (an example of identification information in this application) with the processing content permitted in response to an instruction from the terminal device 15 (see Figure 3). In S57 and S65, if the processing instructed from the terminal device 15C listed in the communication destination list 72 corresponds to the processing content permitted in the communication destination list 72, the printer 17 executes the processing corresponding to the instruction. This makes it possible to set what types of instructions are accepted from the terminal device 15 and executed by the printer 17 based on the processing content set in the communication destination list 27. It is possible to set a terminal device 15 that is only permitted to print, or a terminal device 15 that is permitted to print and change settings, and so on, enabling settings to be made according to the authority of the user using the terminal device 15.

(15) The server 11 is an MDM server and is capable of restricting functions and erasing data on the terminal device 15. The server 11, which is capable of implementing such function restrictions, can manage connection restrictions and processing restrictions on the printer 17 used by the terminal device 15.

Second Embodiment
Next, a printing system 10 according to a second embodiment of the present invention will be described with reference to Fig. 9. In the first embodiment described above, the terminal device 15A requests the server 11 for the communication destination list 27 before sending a connection request to the printer 17. In contrast, in the second embodiment, the terminal device 15A first sends a connection request to the printer 17. In the following description, the same reference numerals are used to designate the same components as those in the first embodiment, and their description will be omitted as appropriate.

As shown in FIG. 9, terminal device 15A sends a connection request to printer 17 (S71). Terminal device 15A sends the connection request (S71) based on, for example, a user's operation input to application 50 (such as selecting printer 17 or launching application 50). Because printer 17 does not have a communication destination list 72 (S17), it sends a response to terminal device 15A permitting the connection (S19).

The printer 17 also requests the communication destination list 27 from the server 11 via the terminal device 15A (S73, S75). At this time, the printer 17 transmits its own device's status information to the terminal device 15A (S73, S75). The status information of the printer 17 here refers to information indicating the communication method that the printer can use for communication, such as wired LAN, Wi-Fi (registered trademark), Bluetooth (registered trademark), or NFC. The server 11 selects the communication destination list 27 to send based on the status information obtained from the printer 17 (S77). As a result, for example, if the server 11 has a destination list 27 for each communication method, such as a destination list 27 with the MAC address of the wired LAN interface set, a destination list 27 with the MAC address of the wireless LAN interface set, a destination list 27 with the public address of Bluetooth (registered trademark), or a destination list 27 with the NFCID set, the server 11 can select and send the destination list 27 required by the printer 17 based on the status information (S13, S23). For example, for a printer 17 that does not have a second communication IF 62 and has only a first communication IF 61 for Bluetooth (registered trademark), it can select and send only the destination list 27 with the public address set.

Therefore, the device status information of the present application refers to information that serves as a criterion for selecting an appropriate destination list 27 for use with the printer 17 from among multiple destination lists 27 present on the server 11. Therefore, the status information can be information indicating the status of various printers 17, which can be used as a basis for selecting a destination list 27. For example, the status information may be the model number or serial number of the printer 17. The status information may also be information about the communication interface currently enabled on the printer 17. In this case, the server 11 can execute control to prevent transmission to the printer 17 of destination lists 27 corresponding to communication interfaces that are present as communication interfaces but are disabled in the software settings or are unavailable due to an error, etc. Furthermore, for example, if a destination list 27 exists in which various processing functions, such as printing, scanning, and faxing functions, are configured, the status information may include information about the functions of the printer 17 in addition to information about the communication interface. For example, a destination list 27 in which only the printing function and setting changes are configured as processing functions is sent to a printer 17 that only has a printing function. Additionally, a communication destination list 27 with the print function, scan function, and setting change set as processing content may be sent to a printer 17 that has both print and scan functions. This allows the server 11 to send only the necessary communication destination list 27 depending on the status of the printer 17.

Furthermore, after acquiring the communication destination list 27 in S13 and S23, the printer 17 checks whether the acquired communication destination list 27 is the communication destination list 27 sent from the server 11 (S78). In the first embodiment described above, the printer 17 inquired of the server 11 whether the communication destination list 27 was sent from the server 11 (the authenticity of the communication destination list 27) (S25 and S27). In contrast, in the second embodiment, the printer 17 determines the authenticity.

For example, as shown by the dashed line in FIG. 2, the printer 17 may determine authenticity using the confirmation information 76 stored in the printer memory unit 69 (S78 in FIG. 9). The confirmation information 76 may be, for example, a hash value, a password, or a decryption key. The printer 17 may calculate a hash value for the communication destination list 27 acquired in S23 using a predetermined calculation formula, and if the calculated hash value matches the confirmation information 76 (hash value) previously stored in the printer control unit 67, determine that the communication destination list 27 sent by the server 11 is legitimate. If the printer 17 determines that the communication destination list 27 is legitimate, it reflects the communication destination list 27 in its own device settings without querying the server 11 (S37).

Alternatively, the server 11 may send the destination list 27 to the server 11 with a password protected. The printer 17 may then determine that the destination list 27 is legitimate if it can unlock the password on the destination list 27 using the password in the confirmation information 76 stored in its own device. Alternatively, the server 11 may encrypt the destination list 27 using a predetermined encryption method before transmitting it, and the printer 17 may determine that the destination list 27 is legitimate if it can decrypt the destination list 27 using the decryption key in the confirmation information 76 stored in its own device. The printer 17 may also perform both the authenticity inquiry of the first embodiment described above and its own authenticity determination using the confirmation information 76 of the second embodiment. For example, if the printer 17 makes an inquiry to the server 11 and is unable to obtain the inquiry results, it may determine the authenticity based on the confirmation information 76 and apply the destination list 27, etc.

Incidentally, in the second embodiment described above, S78 is an example of confirmation processing.

According to the second embodiment, the same effects as those of the first embodiment are achieved.
(1) The printer 17 may also have confirmation information 76 (hash value, password, decryption key, etc.) for determining whether the data is transmitted from the server 11. The printer 17 checks whether the communication destination list 27 acquired via the terminal device 15A is transmitted from the server 11 based on the confirmation information 76 (S78). If the printer 17 determines in S78 that the communication destination list 27 was transmitted from the server 11, it executes a connection request, a print instruction, a setting change instruction, etc. based on the communication destination list 27.

This eliminates the need to inquire about authenticity from the server 11, as in the first embodiment. Therefore, even if communication with the server 11 is not possible, for example, if the inquiry results cannot be obtained from the server 11, the authenticity of the communication destination list 27 can be confirmed on the device itself. Furthermore, the processing load on the server 11 in checking the communication destination list 27 can be reduced.

(Third embodiment)
Next, a printing system 10 according to a third embodiment of the present invention will be described with reference to Fig. 10. In the second embodiment described above, the server 11 executes the determination to select a communication destination list 27 appropriate for the printer 17 (S77). In contrast, in the third embodiment, the printer 17 executes the selection of the communication destination list 27.

More specifically, the terminal device 15A requests a communication destination list 27 from the server 11, as in the first embodiment (S11). Upon receiving the request of S11, the server 11 transmits all communication destination lists 27 held by the terminal device 15A to the terminal device 15A (S79). The terminal device 15A executes the processes from S15 onward, as in the first embodiment, and upon receiving the request of S21, transmits all communication destination lists 27 acquired from the server 11 to the printer 17 (S81). The printer 17 then selects an appropriate communication destination list 27 from all communication destination lists 27 acquired from the server 11 via the terminal device 15A, based on the above-described status of the printer 17 (S83). For example, if the printer 17 has only a first communication IF 61 for Bluetooth (registered trademark), the printer 17 selects only communication destination lists 27 for which a public address is set, and executes a confirmation process with the server 11 (S25). This allows the printer 17 to implement connection restrictions, etc. using the appropriate communication destination list 27.

Incidentally, in the third embodiment, S83 is an example of acquisition processing.

According to the third embodiment, the same effects as those of the first embodiment are achieved.
(1) In S83, the printer 17 acquires multiple destination lists 27 from the server 11 and selects a destination list 27 to use depending on the state of the printer 17. This allows the printer 17 to select an appropriate destination list 27 depending on the type of communication interface and type of communication method provided in the printer 17, and to implement connection restrictions, etc. Furthermore, the server 11 does not need to verify the authenticity of the destination list 27.

(Fourth embodiment)
Next, a printing system 10 according to a fourth embodiment of the present invention will be described with reference to Fig. 11. In the third embodiment described above, the printer 17 selects an appropriate communication destination list 27 from among multiple communication destination lists 27 selected by the server 11 (S83). In contrast, in the fourth embodiment, the terminal device 15A that performs relaying selects the communication destination list 27.

More specifically, the terminal device 15A, as in the third embodiment, acquires all communication destination lists 27 from the server 11 (S79). The printer 17, as in the first embodiment, receives the connection request of S15, permits the connection (S19), and then requests a communication destination list 27 and transmits its own device status information to the terminal device 15A (S85). Based on the status information acquired from the printer 17, the terminal device 15A selects a communication destination list 27 to be sent to the printer 17 from all communication destination lists 27 acquired from the server 11 (S87). The terminal device 15A then transmits only the selected communication destination list 27 to the printer 17 (S89). Even with this configuration, the terminal device 15A can select an appropriate communication destination list 27 from all communication destination lists 27 acquired from the server 11, depending on the status of the printer 17.

According to the fourth embodiment described above, the same effects as those of the first embodiment are achieved.
(1) Furthermore, the terminal device 15A acquires multiple communication destination lists 27 from the server 11 (S79), selects a communication destination list 27 that corresponds to the status of the printer 17 (S87), and transmits it to the printer 17 (S89). This allows the terminal device 15A to select a communication destination list 27 that corresponds to the type of communication interface and type of communication method provided to the printer 17. Furthermore, the process of the server 11 verifying the authenticity of the communication destination list 27 and the process of the printer 17 selecting the communication destination list 27 are no longer necessary.

Fifth Embodiment
Next, a printing system 10 according to a fifth embodiment of the present invention will be described with reference to Fig. 12. In the above-described embodiments, the printer 17 acquires the communication destination list 27 from the server 11 via the terminal device 15. In contrast, in the fifth embodiment, the printer 17 acquires the communication destination list 27 from the server 11 without going through the terminal device 15.

More specifically, for example, when the printer 17 is powered on (S91), it determines whether it has a communication destination list 72 (S17), and if it does not, it requests a communication destination list from the server 11 (S93). The conditions under which the printer 17 requests the communication destination list 27 from the server 11 are not limited to the above-mentioned power-on condition or the condition that the communication destination list 72 is not being held. For example, the printer 17 may request the communication destination list 27 from the server 11 if a predetermined time or more has passed since the printer 17 obtained the communication destination list 27. Alternatively, the printer 17 may request the communication destination list 27 from the server 11 based on operational input to the user IF 65.

When the server 11 receives the request of S93, it sends the communication destination list 27 to the printer 17 (S95). The printer 17 reflects the received communication destination list 27 in its own device settings (S97). The printer 17 then determines connection requests from the terminal device 15 based on the reflected communication destination list 72 (S99, S101, S103). In this way, if the printer 17 can communicate with the server 11 without going through the terminal device 15, it may request and obtain the communication destination list 27 from the server 11. Furthermore, if the printer 17 fails to obtain the communication destination list 27 from the server 11, it may obtain the communication destination list 27 via the terminal device 15 as in the first to fourth embodiments, for example.

Also, in the fifth embodiment, the printer 17 may obtain all communication destination lists 27 from the server 11 in S93 and select a communication destination list 27 to be reflected in the settings based on the status information of the printer 17 itself. Alternatively, the printer 17 may send status information to the server 11 in S93. The server 11 may then select a communication destination list 27 to send to the printer 17 based on the status information.

(Modification)
Although specific examples of the present application have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. Modifications of the above embodiment are listed below.
For example, in the first to fourth embodiments, when the printer 17 acquires the communication destination list 27 via the terminal device 15, the printer 17 may reflect the acquired communication destination list 27 in the settings without performing a confirmation process with the server 11.
Furthermore, if the printer 17 fails to acquire the communication destination list 27 from the server 11, it may use the past communication destination list 72 if it is stored in the printer itself.
Furthermore, if the terminal device 15A that the printer 17 connected to in order to obtain the communication destination list 27 is not listed in the obtained communication destination list 27, the printer 17 disconnects communication with the terminal device 15A that is not listed (S41). However, disconnection is not required. In other words, the printer 17 may maintain the connection with the terminal device 15 that was connected before the communication destination list 27 was applied.
Furthermore, the information set in the communication destination lists 27 and 72 is not limited to physical addresses such as MAC addresses and Bluetooth (registered trademark) public addresses. For example, the information may be the IP address of the terminal device 15, the terminal ID of the terminal device 15, the application ID of the application 50, or identification information set in the terminal device 15 by a system administrator or the like. In other words, the information set in the communication destination lists 27 and 72 may be various information that can identify the terminal device 15.

The configuration of the printing system 10 in the above embodiment is an example. For example, the printing system 10 does not need to include the management PC 13. Furthermore, the printing system 10 does not need to include the server 11 (MDM server) that manages the terminal device 15.
Although the terminal device 15 in the present invention is a smartphone, the information processing terminal is not limited to this. Terminals such as a desktop PC, a notebook PC, and a tablet PC can also be used as the information processing device.
Although the image forming apparatus of the present application is a printer 17, the present application is not limited to this. The image forming apparatus of the present application may be a label printer, a scanner, a fax machine, or the like. In the case of a scanner or fax machine, the reading unit (scanning unit) that reads an image is an example of the image forming unit of the present application. The image forming apparatus may also be a multifunction machine equipped with a fax function, a scanning function, a printing function, a copying function, and the like.
Furthermore, although the printer control unit 67 including the printer storage unit 69 is employed as the control unit of the present invention, the control unit of the present invention does not need to include a storage unit.
Although the printer 17 is configured to include the first communication IF 61 and the second communication IF 62 as the communication unit of the present application, it may be configured to include only one of them.Furthermore, the terminal device 15 may be configured to include either the first communication IF 43 or the second communication IF 44.
The server 11 may also manage at least one terminal device 15 in the terminal DB 28. The server 11 may also be configured such that multiple terminal devices 15 can communicate with one printer 17, or such that only one terminal device 15 can communicate with one printer 17.
The printer 17 does not need to be provided with the template data 74 or the personal information 75 .
Furthermore, the storage unit that stores each program (server program 26, management program 38, OS program 49, application 50, printer program 71) is not particularly limited and may be a ROM or flash memory of each storage unit. Furthermore, the storage unit that stores each program may be a computer-readable storage medium. In addition to the above examples, recording media such as CD-ROMs and DVD-ROMs may also be used as computer-readable storage media.

15 Terminal device (first terminal device, second terminal device, relay terminal device), 15A Terminal device (relay terminal device), 15B Terminal device (second terminal device), 15C Terminal device (first terminal device), 17 Printer (image forming device), 27 Communication destination list, 50 Application (program), 72, 61 First communication IF (communication unit), 62 Second communication IF (communication unit), 64 Printing unit (image forming unit), 67 Printer control unit (control unit), 76 Confirmation information.

Claims (18)

an image forming unit;
a communication unit capable of communicating with a terminal device;
A control unit;
An image forming apparatus comprising:
The control unit
an acquisition process for acquiring a communication destination list from an external device that acquires and stores the status of the image forming apparatus and at least one of the terminal devices;
an instruction response process for executing, for the one or more terminal devices, either a process corresponding to an instruction from the terminal device or a process limiting the process corresponding to the instruction, depending on whether the terminal device is included in the communication destination list acquired by the acquisition process;
Run
The communication destination list includes:
Among the one or more terminal devices, at least a first terminal device is included;
The control unit
in the instruction response process, for an instruction from the first terminal device included in the communication destination list acquired by the acquisition process, a process corresponding to the instruction is executed, and for an instruction from a second terminal device not included in the communication destination list, the process corresponding to the instruction is restricted;
The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
If the relay terminal device is not included in the acquired communication destination list, the image forming device executes a disconnection process to disconnect communication with the relay terminal device after acquiring the communication destination list. an image forming unit;
a communication unit capable of communicating with a terminal device;
A control unit;
An image forming apparatus comprising:
The control unit
an acquisition process for acquiring a communication destination list from an external device that acquires and stores the status of the image forming apparatus and at least one of the terminal devices;
an instruction response process for executing, for the one or more terminal devices, either a process corresponding to an instruction from the terminal device or a process limiting the process corresponding to the instruction, depending on whether the terminal device is included in the communication destination list acquired by the acquisition process;
Run
The communication destination list includes:
Among the one or more terminal devices, at least the first terminal device is not included,
The control unit
in the instruction response process, for an instruction from the first terminal device not included in the communication destination list acquired by the acquisition process, a process corresponding to the instruction is executed, and for an instruction from the second terminal device included in the communication destination list, a process corresponding to the instruction is restricted;
The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
If the relay terminal device is included in the acquired communication destination list, the image forming device executes a disconnection process to disconnect communication with the relay terminal device after acquiring the communication destination list. the image forming apparatus,
3. The image forming apparatus according to claim 1 , wherein the image forming apparatus is a portable image forming apparatus. The communication destination list includes:
4. The image forming apparatus according to claim 1 , wherein the information includes at least one of a MAC address and a Bluetooth (registered trademark) public address for at least one of the terminal devices. The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
executes an inquiry process to inquire of the server whether the communication destination list acquired from the relay terminal device is the communication destination list transmitted from the server;
5. The image forming apparatus according to claim 1, wherein, when the result of the inquiry process is that the communication destination list has been sent from the server, the instruction response process is executed based on the communication destination list. The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
the image forming apparatus,
having confirmation information for determining whether the data is transmitted from the server;
The control unit
In the acquisition process, the communication destination list is acquired from the relay terminal device,
executes a confirmation process for confirming whether the communication destination list acquired from the relay terminal device is data transmitted from the server based on the confirmation information;
6. The image forming apparatus according to claim 1, wherein, if the confirmation process finds that the communication destination list has been sent from the server, the instruction response process is performed based on the communication destination list. The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
3. The image forming apparatus according to claim 1, wherein the communication destination list is acquired from the relay terminal apparatus regardless of whether the relay terminal apparatus is the first terminal apparatus or the second terminal apparatus. The control unit
8. The image forming apparatus according to claim 1, wherein the acquisition process is executed when at least one of the following conditions is met: the image forming apparatus is powered on; a predetermined time has elapsed since the communication destination list was acquired by the acquisition process; and an instruction to acquire the communication destination list is received from a user. The control unit
9. The image forming apparatus according to claim 1, wherein, in the acquisition process, a plurality of communication destination lists are acquired from the external device, and the communication destination list to be used in the instruction response process is selected depending on the state of the image forming apparatus itself. The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
In the acquisition process, the communication destination list is acquired from the relay terminal device,
The relay terminal device
10. The image forming apparatus according to claim 1, wherein a plurality of the communication destination lists are acquired from the server, and the communication destination list is selected according to a state of the image forming apparatus and transmitted to the image forming apparatus. The control unit
3. The image forming apparatus according to claim 1, wherein, in the instruction response processing, image formation is performed by the image forming unit based on the image formation instruction acquired from the first terminal device, and image formation is not performed by the image forming unit based on the image formation instruction acquired from the second terminal device. The control unit
3. The image forming apparatus according to claim 1, wherein, in the instruction response processing, if a connection request is received from the first terminal device to the communication unit, the connection is permitted, and if a connection request is received from the second terminal device to the communication unit, the connection is not permitted. The control unit
2. The image forming apparatus according to claim 1, wherein after the acquisition process is performed, if communication is established with the second terminal device that is not included in the acquired communication destination list, the communication is terminated. The communication destination list includes:
identification information of at least one of the terminal devices is associated with a process permitted in response to an instruction from the terminal device;
The control unit
2. The image forming apparatus according to claim 1, wherein, in the instruction response processing, if the processing instructed from the first terminal device corresponds to a processing permitted in the communication destination list, the processing corresponding to the instruction is executed. The external device is
is a server,
The server
15. The image forming apparatus according to claim 1, wherein at least one of function restriction and data deletion is possible for at least one of the terminal devices. an image forming unit;
a communication unit capable of communicating with a terminal device;
A control unit;
An image forming apparatus comprising:
The control unit
an acquisition process of acquiring a communication destination list including at least a first terminal device among the one or more terminal devices from an external device that acquires and stores the statuses of the image forming apparatus and at least one of the terminal devices;
an instruction response process in which, in response to an instruction from the first terminal device included in the communication destination list acquired by the acquisition process, a process corresponding to the instruction is executed, and, in response to an instruction from a second terminal device not included in the communication destination list, the process corresponding to the instruction is restricted;
Run
The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
If the relay terminal device is not included in the acquired communication destination list, the image forming device executes a disconnection process to disconnect communication with the relay terminal device after acquiring the communication destination list. an image forming unit;
a communication unit capable of communicating with a terminal device;
A control unit;
An image forming apparatus comprising:
The control unit
an acquisition process of acquiring a communication destination list of the one or more terminal devices, the communication destination list including at least a first terminal device, from an external device that acquires and stores statuses of the image forming apparatus and at least one of the terminal devices;
an instruction response process for executing a process corresponding to an instruction from the first terminal device not included in the communication destination list acquired by the acquisition process, and for restricting the process corresponding to an instruction from the second terminal device included in the communication destination list;
Run
The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The control unit
If the relay terminal device is included in the acquired communication destination list, the image forming device executes a disconnection process to disconnect communication with the relay terminal device after acquiring the communication destination list. A computer-readable program for an image forming apparatus capable of communicating with a terminal device,
the image forming apparatus,
an image forming unit;
a communication unit capable of communicating with the terminal device;
Equipped with
The computer,
an acquisition process for acquiring a communication destination list from an external device that acquires and stores the status of the image forming apparatus and at least one of the terminal devices;
an instruction response process for executing, for the one or more terminal devices, either a process corresponding to an instruction from the terminal device or a process limiting the process corresponding to the instruction, depending on whether the terminal device is included in the communication destination list acquired by the acquisition process;
Execute
The communication destination list includes:
Among the one or more terminal devices, at least a first terminal device is included;
The computer,
In the instruction response process, for an instruction from the first terminal device included in the communication destination list acquired by the acquisition process, a process corresponding to the instruction is executed, and for an instruction from a second terminal device not included in the communication destination list, the process corresponding to the instruction is restricted;
The external device is
a relay terminal device capable of acquiring the communication destination list from a server,
The computer,
a program for executing a disconnection process for disconnecting communication with the relay terminal device after acquiring the communication destination list, if the relay terminal device is not included in the acquired communication destination list;